Firewall-1

Re: [FW-1] NGX Virtual Memory Issue

Subject: Re: [FW-1] NGX Virtual Memory Issue
From: Andrey Maluck <andreym AT PRONET DOT UA>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 28 Jul 2005 10:32:38 +0300
Thanks, Josef! It was my oversight.:)

Josef Mruzek wrote:

You try fw ctl get int fw_smem_use_alternate_malloc. This is incorrect global parameter fw1_smem_use_alternate_malloc :-).
JM

Andrey Maluck napsal(a):

Sorry for my grammar :)  Such a mess of tenses.

After setting those parameters via fwkern.conf and reboot I tried to see their values from command line and the result is below:

# fw ctl get int fw1_smem_use_alternate_malloc
get: Operation failed: Invalid argument
# fw ctl get int fw1_smem_use_alternate_malloc
get: Operation failed: Invalid argument

At the same time I can get other variable "asm_http_allow_connect" which is also set via fwkern.conf .
# fw clt get int asm_http_allow_connect
asm_http_allow_connect = 1 Does anyone know how to check the values ?

Thanks,
Andrey.

Andrey Maluck wrote:

Does anyone tried setting those parameters fog SPLAT NGX ?

Josef Mruzek wrote:

Hi Andrey,
I has similar problem on SPLAT R55 as you and I fixed with following solution.
Best regard,
Josef Mruzek

== sk18289==
Solution
For NG FP3, as a workaround, the machine can be configured to boot with 512MB RAM. The issue is solved in FP3 HF2 HFA 324 and FireWall-1 NG with Application Intelligence, but is 'off' by default because of risk management considerations. To get large amounts of memory on Linux machines with 1GB memory or more, do the following actions: Create a file named fwkern.conf in $FWDIR/boot/modules/ (it may already exist - if so, keep the current contents and just add the new lines below).
Add the following two lines to the file:
fw_smem_use_alternate_malloc=1
fw_hmem_use_alternate_malloc=1
Then reboot the machine.
==sk18289==

Andrey Maluck napsal(a):

Hi, all.
I encounter strange problem with NGX SPLAT. From time to time it just hangs up and only cold restart helps. Smart View Monitor reports virtual memory usage right after restart at about 600 MB and then in a couple of days it grows up to 985 MB. As I can see from System History report in SV Monitor FW hangs up when virtual memory usage reaches the higher mark But another starnge thing is that while SV monitor shows high VM usage, vmstat reports ZERO usage!!!!

procs memory swap io system cpu r b swpd free buff cache si so bi bo in cs us sy wa id 0 0 0 297572 49052 387048 0 0 26 23 121 46 1 0 1 98

How can that be ? Any thougts about what can cause such behaviour ?

Thanks,
Andrey.





...

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>